Providing secure access to cloud services based on the Microsoft Cloud App Security solution

DOI: 10.31673/2409-7292.2021.042935

Abstract

Methods and means of providing access to cloud services on the example of Microsoft Cloud App Security solution are studied. The purpose, main functions and principles of the Microsoft Cloud App Security solution are defined. Based on the research conducted in the work, a variant of the technology of providing secure access to cloud services of the corporate information system and recommendations for the application of this technology at the enterprise have been developed.

Keywords: corporate information system, cybersecurity, access protection, cloud service, casb methods and tools, secure access technology.

References
1. Інтернет ресурс. Хмарні сервіси на базі Microsoft для бізнесу [Електронний ресурс] режим доступу: https://www.lankey.ru/oblachnie-servisi/ .
2. Інтернет ресурс. CASB [режим доступу https://www.anti-malware.ru/analytics/Market_Analysis/cloudaccess-security-broker ].
3. CASB A Complete Guide - 5STARCooks (September 29, 2019)- 2020. – 302p.
4. Cloud Access Security Broker A) Complete Guide - 5STARCooks (September 6, 2019)– 2020. – 298p.
5. Using Oracle CASB Cloud Service., Release 20.1.1.0 [Електронний ресурс] режим доступу: https://www.lankey.ru/oblachnie-servisi - Oracle - July 2020 -727p
6. Осьмак Д.П. Технологія забезпечення захисту хмарних сервісів на базі рішення Microsoft Cloud App security [Електронний ресурс]. - Всеукраїнська наукова конференція «Актуальні проблеми кібербезпеки».- Київ, ДУТ.- с. 129-132[режим доступу: http://www.dut.edu.ua/uploads/p_1739_27992763.pdf]
7. Miller R. Who Has the Most Web Servers? [Electronic resource] / R. Miller - Access mode: http://www.datacenterknowledge.com/archives/2009/05/14/whos-got-the- most-web-servers/ - 27.09.2019.
8. Оплачко Е.С. Облачньїе технологии и их применение в задачах вьічислительной биологии [Злектронньїй ресурс] / Е.С. Оплачко., Д.М. Устинин., М.Н. Устинин - Режим доступа: http://www.matbio.org/2013/Oplachko_8_449.pdf - 28.09.2019.
9. PaaS, DBaaS, SaaS... Что все ^то значит? [Злектронньїй ресурс] - Режим доступа: https://habr.com/ru/company/kingservers/blog/310022/ - 28.09.2019.
10. Wadiwala R. Cloud Database - DBaaS (Database as a Service) [Electronic resource] / R. Wadiwala - Access mode: https://labs.sogeti.com/cloud- database-dbaas-database-as-a-service/ - 29.09.2019
11. Demchenko Y. Defining inter-cloud architecture for interoperability and integration [Text] / Y. Demchenko, C. Ngo, M.X. Makkes, R. Strijkers, C. de Laat // Proceeding of the 3rd International Conference on Cloud Computing, GRIDs and Virtualization, Nice, France, July 22-27, 2012 y. - pp. 174-180
12. Malik N.A. Threat modeling in pervasive computing paradigm [Text] / N.A. Malik, M.Y. Javed, U. Mahmud // Proceedings of the Mobility and Security, New Technologies, Tangier, November 5-7, 2008 y. - pp. 1-5
13. McRee R. PTA: Practical threat analysis [Text] / R. McRee // Proceedings of the Information Systems Security Association, London, September 1516, 2008 y. - pp. 37-40
14. Jehangir A. Securing inter-cluster communication in personal networks [Text] / A. Jehangir // Proceedings of the 4th Annual InternationalConference on Mobile and Ubiquitous Systems: Networking and Services, Philadelphia, August 6-10, 2007 y. - pp. 1-6
15. Bertino E. L. Security for Web Services and Service-Oriented Architectures [Text] / E. L. Bertino // Proceedings of the 2th Annual International Conference on Information Security, New York, USA., September 2-7, 2012 y. - pp. 35-69